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IN THE CLAIMS ; 

Please amend claims 1-5, 7, 8, 10, 11, 13-15, 19, and 20 as 
indicated below. 

A listing of the status of all claims 1-20 in the present 
patent application is provided below. 

1 (Currently Amended) . A parallel izable integrity- aware 
encryption method, the method comprising the steps of: 

whitening at least one message block with a first mask 

value ; 

encrypting the whitened at least one whitened message 
block using a block cipher and a first key; and 

whitening the encrypted at least one encrypted message 
block with a second mask value to generate at least one 
corresponding output ciphertext block. 

2 (Currently Amended) . The method of claim 1, wherein the first 
mask value is and second mask values — a^ee computed by applying a 
XOR function to a first value derived from a NONCE value and a 
second value derived from encrypting a third value using the 
block cipher and a second key, and then applying a substitution 
function to the result of the XOR functio n, wherein the second 
mask value is computed by applying a XOR function to a fourth 

2 

57983.000164 WASHINGTON 698986vl 



U.S. Patent Application No.: 10/772,433 
Attorney Docket No.: 57983.000164 
Client Reference No. : 16404ROUS01U 

value derive d f r om the NONCE value and a fifth value derived 

from encrypting a sixth value using the b lock cipher and the 

second key, and th en ap plying the substitution f unction to the 

r esult of the XOR function . 

3 (Currently Amended). The method of claim 2, wherein the first 
and fourth values derived form from the NONCE value 4r& are 
permutations of a bi nary value computed by encrypting the NONCE 
value using the block cipher and the first key. 

4 (Currently Amended). The method of claim 2, wherein the third 
and sixth values 4rB — a are unique counter values or random 
numbers , 

5 {Currently Amended) . The method of claim 2, wherein the steps 
of whitening each comprise the step of applying a XOR function- 
the first and occond maok valuer? being equal . 

6 (Original) . The method of claim 1, further comprising the 
steps of: 

applying a XOR function to all message blocks of a message 
to compute a XOR- sum ; 

applying a third mask value to the XOR- sum; 
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encrypting the masked XOR-sum using the block cipher and 
the first key; and 

applying a fourth mask value to the encrypted XOR-sum to 
generate an integrity tag. 

7 (Currently Amended). The method of claim 6, wherein the third 
mas k value is and — fourth mask values — ae?e computed by applying a 
XOR function to a first value derived from a NONCE value and a 
second value derived from encrypting a third value using the 
block cipher and a second key, and then applying a substitution 
function to the result of the XOR function , wherein the fourth 
mask value is computed by applying a XOR function to a fourth 
value derived from the NONCE value and a fifth value derived 
from encrypting a sixth v alue using the block cipher and the 
second key, and then applying the substitution funct ion to the 
result of the XOR fun ction. 

8 (Currently Amended) . The method of claim 1, further 
comprising the steps of : 

whitening the at least one output ciphertext block with the 
second mask value; 

decrypting the at least one whitened ciphertext block using 
a block cipher and [[a]] the first key; and 
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whitening the at least one decrypted block with [ [a] ] the 

first mask value to generate at least one corresponding message 

block. 

9 (Original). The method of claim 1, wherein the block cipher 
is selected from the group consisting of: an Advanced 
Encryption Standard (AES) block cipher, a Data Encryption 
Standard (DES) block cipher, and a Triple Data Encryption 
Standard (3DES) block cipher. 

10 (Currently Amended) . The method of claim 2, wherein the 
second and fifth values are elements of a vector A-fc — least — ©tie 
signal — embodied — In at — least — eee — carrier wave — for — transmitting — a 

computer program of instructions configured to be readable by at 

least — one processor — §e*= — instructing — the — at — least — ese — processor 
%e — execute — a — computer — process — f-ea? — performing — the — method — eta- 
reeited in claim 1 . 

11 (Currently Amended) . At least one processor readable carrier 
medium for storing a computer program of instructions configured 
to be readable by at least one processor for instructing the at 
least one processor to execute a computer process for performing 
the method as recited in claim 1. 
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12 (Original) . A parallelizable integrity-aware encryption 
method, the method comprising the steps of: 

applying a XOR function to all blocks of a message to 
compute a XOR-sum; 

applying a first mask value to the XOR-sum; 

encrypting the masked XOR-sum using a block cipher and a 
first key; and 

applying a second mask value to the encrypted XOR-sum to 
generate an integrity tag. 

13 (Currently Amended) . The method of claim 12, wherein the 
first mask value is a»d — second — msteh — values — a-see computed by 
applying a XOR function to a first value derived from a NONCE 
value and a second value derived from encrypting a third value 
using the block cipher and a second key, and then applying a 
substitution function to the result of the XOR function , wherein 
the second mask value is computed by app lying a XOR function to 
a fourth value derived from the NONCE value a nd a fifth value 
derived from encrypting a sixth value using the block cipher and 
the second key, and then applying the substitution function to 
the result of the XOR function . 
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14 (Currently Amended). The method of claim 13, wherein the 
first and f o urth values derived form from the NONCE value is- are 
permutations of a binary value computed by encrypting the NONCE 
value using the block cipher and the first key. 

15 (Currently Amended). The method of claim 12, further 
comprising the steps of: 

whitening at least one message block with a third mask 
value; 

encrypting the whitened at least one whitened message block 
using the block cipher and the first key; and 

whitening the encrypted at least one encrypted message 
block with the third mask value to generate a corresponding 
output ciphertext block. 

16 (Original). The method of claim 15, wherein the steps of 
whitening each comprise the step of applying a XOR function. 

17 (Original) . The method of claim 15, wherein the third mask 
value is computed by applying a XOR function to a first value 
derived from a NONCE value and a second value derived from 
encrypting a third value using the block cipher and a second 
key, and then applying a substitution function to the result of 
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the XOR function. 

18 (Original). The method of claim 12, wherein the block cipher 
is selected from the group consisting of: an Advanced Encryption 
Standard (AES) block cipher, a Data Encryption Standard (DES) 
block cipher, and a Triple Data Encryption Standard (3DES) block 
cipher . 

19 (Currently Amended) . The method of claim 13, wherein the 
second and fifth values are elements of a vector At — least — eae 
signal embodied in at lcaot one carrier wave for transmitting a 
computer program of instructions configured to be roadablc by at 
lcaot one processor for instructing the at least — one processor 

— execute — a — computer — process — #ea= — performing — the — method — as 
recited in claim 12 . 

20 (Currently Amended) . At least one processor readable carrier 
medium for storing a computer program of instructions configured 
to be readable by at least one processor for instructing the at 
least one processor to execute a computer process for performing 
the method as recited in claim 12. 
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